CVE-2023-3605 — Improper Restriction of Excessive Authentication Attempts in Online Shopping Portal

CWE-307 — Improper Restriction of Excessive Authentication AttemptsCWE-667 — Improper LockingCWE-833 — Deadlock4 documents4 sources
Severity
9.1CRITICALNVD
CNA6.5
EPSS
0.1%
top 81.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Online Shopping Portal
Timeline
PublishedJul 10
Latest updateSep 18

Description

A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233467.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HExploitability: 3.9 | Impact: 5.2

Affected Packages2 packages

🔴Vulnerability Details

3
GHSA
Vyper has incorrect re-entrancy lock when key is empty string↗2023-09-18
▶
GHSA
GHSA-j52c-x4fq-cc7v: A vulnerability was found in PHPGurukul Online Shopping Portal 1↗2023-07-10
▶
CVEList
PHPGurukul Online Shopping Portal Registration Page excessive authentication↗2023-07-10
▶
CVE-2023-3605 — Online Shopping Portal vulnerability | cvebase